Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:salon_booking_system_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductSalon Booking System Pro (b33b35db-68fb-5b2b-b7db-b2376fc8ea69)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0920 vulnerable 2026-06-08 05:39:11.494987 Salon booking system < 7.6.3 - Customer+ Bookings/Customers Data Disclosure
The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, which could allow customers to access all bookings and other customer's data
Published: 2022-04-11T14:40:58.000Z
Updated: 2024-08-02T23:47:42.834Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0919 vulnerable 2026-06-08 05:39:11.493702 Salon booking system < 7.6.3 - Unauthenticated Sensitive Data Disclosure
The Salon booking system Free and pro WordPress plugins before 7.6.3 do not have proper authorisation when searching bookings, allowing any unauthenticated users to search other's booking, as well as retrieve sensitive information about the bookings, such as the full name, email and phone number of the person who booked it.
Published: 2022-04-11T14:40:56.000Z
Updated: 2024-08-02T23:47:42.636Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.